CVE-2026-2542: Unquoted Search Path or Element

A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-service.exe. Executing a manipulation can lead to unquoted search path. It is possible to launch the attack on the local host. Thi...

EUVD-2011-3458

Malware in sbrugna...

PT-2024-6440

Name of the Vulnerable Software and Affected Versions TeamViewer Remote Clients versions prior to 15.58.4 for Windows Description The issue is related to improper verification of cryptographic signature during the installation of a VPN driver via the TeamViewer service.exe component. This allows ...

PT-2021-12852

Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered where the anti ransomware service.exe keeps a log in a folder with write permissions for unprivileged users. The logs follow a predictable pattern, allowing an...

PT-2021-12853

Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered in the anti ransomware service.exe component, which includes functionality to quarantine files by copying a suspected ransomware file from one directory to anothe...

PT-2021-12851

Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered in the anti ransomware service.exe component, which exposes a REST API that can be accessed by all users, including unprivileged ones. This API is used for...

Acronis True Image security vulnerabilities

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. Acronis True Image 2020 version 24.5.22510 contains a denial of service vulnerability that stems from the program's logs being generated in a predictable pattern, allowing a non-privileged user to...

CVE-2019-12572: Uncontrolled Search Path Element

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client 1.0.2 build 02363 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service pia-service.exe loads the OpenSSL library from...

PT-2014-6503

Name of the Vulnerable Software and Affected Versions iBackup versions 10.0.0.32 and earlier Description The issue allows local users to gain privileges via a Trojan horse file due to weak permissions set for the ib service.exe file, which has Everyone: Full Control settings. Recommendations For...

Measuresoft ScadaPro < 4.0.1.0 service.exe Multiple Vulnerabilities (credentialed check)

Binary data scadameasuresoftscadapromultipleserverlocal.nbin...

CVE-2011-3495

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the 1 RF, 2 wF, 3 UF, or 4 NF command...

Design/Logic Flaw

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method...

Command injection

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 BF, 2 OF, or 3 EF command...

CVE-2011-3495

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the 1 RF, 2 wF, 3 UF, or 4 NF command...

CVE-2011-3497

Measuresoft ScadaPro 4.0.0 and earlier is affected by CVE-2011-3497 where remote attackers can trigger command execution by abusing the XF function in service.exe (insecure exposed method / directory traversal). The issue, tied to a broader set of vulnerabilities (stack overflow, insecure method ...

CVE-2011-3497

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method...

CVE-2011-3496

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 BF, 2 OF, or 3 EF command...

PT-2011-4471

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro versions 4.0.0 and earlier Description The issue is related to multiple stack-based buffer overflows in service.exe, allowing remote attackers to cause a denial of service crash and possibly execute arbitrary code via a lo...

CVE-2011-3497: Exposure of Sensitive Information to an Unauthorized Actor

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method...

CVE-2011-3495: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the 1 RF, 2 wF, 3 UF, or 4 NF command...